CompAi: A Tool for GDPR completeness checking of privacy policies using artificial intelligence

We introduce𝐶𝑜𝑚𝑝𝐴𝜄 – a tool for checking the completeness of privacy policies against the general data protection regulation (GDPR). 𝐶𝑜𝑚𝑝𝐴𝜄 facilitates the analysis of privacy policies to check their compliance to GDPR requirements. Since privacy policies serve as an agreement between a software system and its prospective users, the policy must fully capture such requirements to ensure that collected personal data of individuals (or users) remains protected as specified by the GDPR. For a given privacy policy, 𝐶𝑜𝑚𝑝𝐴𝜄 semantically analyzes its textual content against a comprehensive conceptual model which captures all information types that might appear in any policy. Based on this analysis, alongside some input from the end user, 𝐶𝑜𝑚𝑝𝐴𝜄 can determine the potential incompleteness violations in the input policy with an accuracy of ≈96%. 𝐶𝑜𝑚𝑝𝐴𝜄 generates a detailed report that can be easily reviewed and validated by experts. The source code of𝐶𝑜𝑚𝑝𝐴𝜄 is publicly available on https: //figshare.com/articles/online_resource/CompAI/23676069, and a demo of the tool is available on https://youtu.be/zwa_tM3fXHU.